Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ZKTeco BioTime default password
Vulnerability Description
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password").
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
CWE-1393
Vulnerability Title
ZKTeco BioTime 安全漏洞
Vulnerability Description
ZKTeco BioTime是中国ZKTeco公司的一款功能强大的基于 web 的时间和出勤管理软件。 ZKTeco BioTime存在安全漏洞，该漏洞源于允许未经验证的攻击者枚举用户名并使用默认密码123456登录任意账户。
CVSS Information
N/A
Vulnerability Type
N/A